# Vulnerabilities published in 2022


- [GSD-2022-1007617](https://insights.sbomify.com/GSD-2022-1007617/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (not scored)
- [GSD-2022-1007616](https://insights.sbomify.com/GSD-2022-1007616/): nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (not scored)
- [GSD-2022-1007615](https://insights.sbomify.com/GSD-2022-1007615/): nilfs2: fix use-after-free bug of struct nilfs_root (not scored)
- [GSD-2022-1007614](https://insights.sbomify.com/GSD-2022-1007614/): scsi: stex: Properly zero out the passthrough command structure (not scored)
- [GSD-2022-1007613](https://insights.sbomify.com/GSD-2022-1007613/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (not scored)
- [GSD-2022-1007612](https://insights.sbomify.com/GSD-2022-1007612/): ALSA: usb-audio: Fix potential memory leaks (not scored)
- [GSD-2022-1007611](https://insights.sbomify.com/GSD-2022-1007611/): regulator: qcom_rpm: Fix circular deferral regression (not scored)
- [GSD-2022-1007610](https://insights.sbomify.com/GSD-2022-1007610/): xen/gntdev: Prevent leaking grants (not scored)
- [GSD-2022-1007609](https://insights.sbomify.com/GSD-2022-1007609/): UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (not scored)
- [GSD-2022-1007608](https://insights.sbomify.com/GSD-2022-1007608/): fbdev: smscufx: Fix use-after-free in ufx_ops_open() (not scored)
- [GSD-2022-1007607](https://insights.sbomify.com/GSD-2022-1007607/): sh: machvec: Use char[] for section boundaries (not scored)
- [GSD-2022-1007606](https://insights.sbomify.com/GSD-2022-1007606/): ext4: avoid crash when inline data creation follows DIO write (not scored)
- [GSD-2022-1007605](https://insights.sbomify.com/GSD-2022-1007605/): ext4: fix null-ptr-deref in ext4_write_info (not scored)
- [GSD-2022-1007604](https://insights.sbomify.com/GSD-2022-1007604/): wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (not scored)
- [GSD-2022-1007603](https://insights.sbomify.com/GSD-2022-1007603/): vhost/vsock: Use kvmalloc/kvfree for larger packets. (not scored)
- [GSD-2022-1007602](https://insights.sbomify.com/GSD-2022-1007602/): mISDN: fix use-after-free bugs in l1oip timer handlers (not scored)
- [GSD-2022-1007601](https://insights.sbomify.com/GSD-2022-1007601/): net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (not scored)
- [GSD-2022-1007600](https://insights.sbomify.com/GSD-2022-1007600/): bnx2x: fix potential memory leak in bnx2x_tpa_stop() (not scored)
- [GSD-2022-1007599](https://insights.sbomify.com/GSD-2022-1007599/): drm/mipi-dsi: Detach devices when removing the host (not scored)
- [GSD-2022-1007598](https://insights.sbomify.com/GSD-2022-1007598/): drm/bridge: megachips: Fix a null pointer dereference bug (not scored)
- [GSD-2022-1007597](https://insights.sbomify.com/GSD-2022-1007597/): memory: of: Fix refcount leak bug in of_get_ddr_timings() (not scored)
- [GSD-2022-1007596](https://insights.sbomify.com/GSD-2022-1007596/): soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (not scored)
- [GSD-2022-1007595](https://insights.sbomify.com/GSD-2022-1007595/): clk: tegra: Fix refcount leak in tegra210_clock_init (not scored)
- [GSD-2022-1007594](https://insights.sbomify.com/GSD-2022-1007594/): clk: tegra: Fix refcount leak in tegra114_clock_init (not scored)
- [GSD-2022-1007593](https://insights.sbomify.com/GSD-2022-1007593/): clk: tegra20: Fix refcount leak in tegra20_clock_init (not scored)
- [GSD-2022-1007592](https://insights.sbomify.com/GSD-2022-1007592/): HSI: omap_ssi: Fix refcount leak in ssi_probe (not scored)
- [GSD-2022-1007591](https://insights.sbomify.com/GSD-2022-1007591/): media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (not scored)
- [GSD-2022-1007590](https://insights.sbomify.com/GSD-2022-1007590/): RDMA/rxe: Fix "kernel NULL pointer dereference" error (not scored)
- [GSD-2022-1007589](https://insights.sbomify.com/GSD-2022-1007589/): usb: gadget: function: fix dangling pnp_string in f_printer.c (not scored)
- [GSD-2022-1007588](https://insights.sbomify.com/GSD-2022-1007588/): md: Replace snprintf with scnprintf (not scored)
- [GSD-2022-1007587](https://insights.sbomify.com/GSD-2022-1007587/): drivers: serial: jsm: fix some leaks in probe (not scored)
- [GSD-2022-1007586](https://insights.sbomify.com/GSD-2022-1007586/): firmware: google: Test spinlock on panic path to avoid lockups (not scored)
- [GSD-2022-1007585](https://insights.sbomify.com/GSD-2022-1007585/): clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (not scored)
- [GSD-2022-1007584](https://insights.sbomify.com/GSD-2022-1007584/): iommu/omap: Fix buffer overflow in debugfs (not scored)
- [GSD-2022-1007583](https://insights.sbomify.com/GSD-2022-1007583/): crypto: cavium - prevent integer overflow loading firmware (not scored)
- [GSD-2022-1007582](https://insights.sbomify.com/GSD-2022-1007582/): thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (not scored)
- [GSD-2022-1007581](https://insights.sbomify.com/GSD-2022-1007581/): powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (not scored)
- [GSD-2022-1007580](https://insights.sbomify.com/GSD-2022-1007580/): wifi: brcmfmac: fix invalid address access when enabling SCAN log level (not scored)
- [GSD-2022-1007579](https://insights.sbomify.com/GSD-2022-1007579/): tcp: annotate data-race around tcp_md5sig_pool_populated (not scored)
- [GSD-2022-1007578](https://insights.sbomify.com/GSD-2022-1007578/): wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (not scored)
- [GSD-2022-1007577](https://insights.sbomify.com/GSD-2022-1007577/): xfrm: Update ipcomp_scratches with NULL when freed (not scored)
- [GSD-2022-1007576](https://insights.sbomify.com/GSD-2022-1007576/): wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (not scored)
- [GSD-2022-1007575](https://insights.sbomify.com/GSD-2022-1007575/): Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (not scored)
- [GSD-2022-1007574](https://insights.sbomify.com/GSD-2022-1007574/): Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (not scored)
- [GSD-2022-1007573](https://insights.sbomify.com/GSD-2022-1007573/): net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (not scored)
- [GSD-2022-1007572](https://insights.sbomify.com/GSD-2022-1007572/): Bluetooth: L2CAP: Fix user-after-free (not scored)
- [GSD-2022-1007571](https://insights.sbomify.com/GSD-2022-1007571/): drm: Use size_t type for len variable in drm_copy_field() (not scored)
- [GSD-2022-1007570](https://insights.sbomify.com/GSD-2022-1007570/): drm: Prevent drm_copy_field() to attempt copying a NULL pointer (not scored)
- [GSD-2022-1007569](https://insights.sbomify.com/GSD-2022-1007569/): media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (not scored)
- [GSD-2022-1007568](https://insights.sbomify.com/GSD-2022-1007568/): nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (not scored)
- [GSD-2022-1007567](https://insights.sbomify.com/GSD-2022-1007567/): HID: roccat: Fix use-after-free in roccat_read() (not scored)
- [GSD-2022-1007566](https://insights.sbomify.com/GSD-2022-1007566/): usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (not scored)
- [GSD-2022-1007565](https://insights.sbomify.com/GSD-2022-1007565/): usb: musb: Fix musb_gadget.c rxstate overflow bug (not scored)
- [GSD-2022-1007564](https://insights.sbomify.com/GSD-2022-1007564/): usb: idmouse: fix an uninit-value in idmouse_open (not scored)
- [GSD-2022-1007563](https://insights.sbomify.com/GSD-2022-1007563/): KVM: arm64: vgic: Fix exit condition in scan_its_table() (not scored)
- [GSD-2022-1007562](https://insights.sbomify.com/GSD-2022-1007562/): mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (not scored)
- [GSD-2022-1007561](https://insights.sbomify.com/GSD-2022-1007561/): ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (not scored)
- [GSD-2022-1007560](https://insights.sbomify.com/GSD-2022-1007560/): net: hns: fix possible memory leak in hnae_ae_register() (not scored)
- [GSD-2022-1007559](https://insights.sbomify.com/GSD-2022-1007559/): iommu/vt-d: Clean up si_domain in the init_dmars() error path (not scored)
- [GSD-2022-1007558](https://insights.sbomify.com/GSD-2022-1007558/): drm/msm/hdmi: fix memory corruption with too many bridges (not scored)
- [GSD-2022-1007557](https://insights.sbomify.com/GSD-2022-1007557/): mmc: core: Fix kernel panic when remove non-standard SDIO card (not scored)
- [GSD-2022-1007556](https://insights.sbomify.com/GSD-2022-1007556/): xhci: Remove device endpoints from bandwidth list when freeing the device (not scored)
- [GSD-2022-1007555](https://insights.sbomify.com/GSD-2022-1007555/): fbdev: smscufx: Fix several use-after-free bugs (not scored)
- [GSD-2022-1007554](https://insights.sbomify.com/GSD-2022-1007554/): ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (not scored)
- [GSD-2022-1007553](https://insights.sbomify.com/GSD-2022-1007553/): kernfs: fix use-after-free in __kernfs_remove (not scored)
- [GSD-2022-1007552](https://insights.sbomify.com/GSD-2022-1007552/): x86/unwind/orc: Fix unreliable stack dump with gcov (not scored)
- [GSD-2022-1007551](https://insights.sbomify.com/GSD-2022-1007551/): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (not scored)
- [GSD-2022-1007550](https://insights.sbomify.com/GSD-2022-1007550/): net: ehea: fix possible memory leak in ehea_register_port() (not scored)
- [GSD-2022-1007549](https://insights.sbomify.com/GSD-2022-1007549/): kcm: annotate data-races around kcm->rx_wait (not scored)
- [GSD-2022-1007548](https://insights.sbomify.com/GSD-2022-1007548/): openvswitch: switch from WARN to pr_warn (not scored)
- [GSD-2022-1007547](https://insights.sbomify.com/GSD-2022-1007547/): kcm: annotate data-races around kcm->rx_psock (not scored)
- [GSD-2022-1007546](https://insights.sbomify.com/GSD-2022-1007546/): usb: mon: make mmapped memory read only (not scored)
- [GSD-2022-1007545](https://insights.sbomify.com/GSD-2022-1007545/): nilfs2: fix leak of nilfs_root in case of writer thread creation failure (not scored)
- [GSD-2022-1007544](https://insights.sbomify.com/GSD-2022-1007544/): fs: fix UAF/GPF bug in nilfs_mdt_destroy (not scored)
- [GSD-2022-1007543](https://insights.sbomify.com/GSD-2022-1007543/): nilfs2: fix use-after-free bug of struct nilfs_root (not scored)
- [GSD-2022-1007542](https://insights.sbomify.com/GSD-2022-1007542/): nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (not scored)
- [GSD-2022-1007541](https://insights.sbomify.com/GSD-2022-1007541/): scsi: stex: Properly zero out the passthrough command structure (not scored)
- [GSD-2022-1007540](https://insights.sbomify.com/GSD-2022-1007540/): nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (not scored)
- [GSD-2022-1007539](https://insights.sbomify.com/GSD-2022-1007539/): ALSA: usb-audio: Fix potential memory leaks (not scored)
- [GSD-2022-1007538](https://insights.sbomify.com/GSD-2022-1007538/): regulator: qcom_rpm: Fix circular deferral regression (not scored)
- [GSD-2022-1007537](https://insights.sbomify.com/GSD-2022-1007537/): xen/gntdev: Prevent leaking grants (not scored)
- [GSD-2022-1007536](https://insights.sbomify.com/GSD-2022-1007536/): UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (not scored)
- [GSD-2022-1007535](https://insights.sbomify.com/GSD-2022-1007535/): fbdev: smscufx: Fix use-after-free in ufx_ops_open() (not scored)
- [GSD-2022-1007534](https://insights.sbomify.com/GSD-2022-1007534/): btrfs: fix race between quota enable and quota rescan ioctl (not scored)
- [GSD-2022-1007533](https://insights.sbomify.com/GSD-2022-1007533/): sh: machvec: Use char[] for section boundaries (not scored)
- [GSD-2022-1007532](https://insights.sbomify.com/GSD-2022-1007532/): ext4: fix null-ptr-deref in ext4_write_info (not scored)
- [GSD-2022-1007531](https://insights.sbomify.com/GSD-2022-1007531/): ext4: avoid crash when inline data creation follows DIO write (not scored)
- [GSD-2022-1007530](https://insights.sbomify.com/GSD-2022-1007530/): wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (not scored)
- [GSD-2022-1007529](https://insights.sbomify.com/GSD-2022-1007529/): vhost/vsock: Use kvmalloc/kvfree for larger packets. (not scored)
- [GSD-2022-1007528](https://insights.sbomify.com/GSD-2022-1007528/): mISDN: fix use-after-free bugs in l1oip timer handlers (not scored)
- [GSD-2022-1007527](https://insights.sbomify.com/GSD-2022-1007527/): sctp: handle the error returned from sctp_auth_asoc_init_active_key (not scored)
- [GSD-2022-1007526](https://insights.sbomify.com/GSD-2022-1007526/): net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() (not scored)
- [GSD-2022-1007525](https://insights.sbomify.com/GSD-2022-1007525/): bnx2x: fix potential memory leak in bnx2x_tpa_stop() (not scored)
- [GSD-2022-1007524](https://insights.sbomify.com/GSD-2022-1007524/): net: mvpp2: fix mvpp2 debugfs leak (not scored)
- [GSD-2022-1007523](https://insights.sbomify.com/GSD-2022-1007523/): drm/mipi-dsi: Detach devices when removing the host (not scored)
- [GSD-2022-1007522](https://insights.sbomify.com/GSD-2022-1007522/): drm/bridge: megachips: Fix a null pointer dereference bug (not scored)
- [GSD-2022-1007521](https://insights.sbomify.com/GSD-2022-1007521/): drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (not scored)
- [GSD-2022-1007520](https://insights.sbomify.com/GSD-2022-1007520/): memory: of: Fix refcount leak bug in of_get_ddr_timings() (not scored)
- [GSD-2022-1007519](https://insights.sbomify.com/GSD-2022-1007519/): soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (not scored)
- [GSD-2022-1007518](https://insights.sbomify.com/GSD-2022-1007518/): clk: tegra: Fix refcount leak in tegra114_clock_init (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/91/
